onesikgypo
Topic Starter
Hello, and thankyou in advance
Im having a lot of trouble on this computer with spyware, expecially with elitum elite bar, but i am also having many other troubles, i keep getting spyware on my computer for no reason, and in addition when i start up my computer i ALWAYS get these 2 disgusting (porn) popups and no matter what i do, it cannot be fixed, ive run both adaware and spybot S&D both updated and both using the steps provided at this site –> http://www.wilderssecurity.com/showthread.php?t=15913
I am using Trend Micro Antivirus software
im going to post my hijack this log now, and i hope that you guys can fix my comp:
P.S PLEASE NOTE THIS IS MY FIRST TIME USING HIJACKTHIS IN A LONG TIME AND I DID NOT CHANGE ANY SETTINGS, I DOWNLOADED IT, THEN MADE THE LOG, SO IF THERES ANYTHING ELSE I MUST DO PLEASE TELL ME
Logfile of HijackThis v1.98.2
Scan saved at 3:17:20 PM, on 23/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\Program Files\Trend Micro\Internet Security\tmproxy.exe
C:\Program Files\Trend Micro\Internet Security\PccPfw.exe
C:\WINDOWS\System32\svchosets.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exe
c:\windows\system32\qpalsp\palsp.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exe
C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntim e.exe
C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
c:\windows\system32\qpalsp\wshield.exe
C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\explorer.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
C:\Documents and Settings\Matthew\My Documents\hijackhis2\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R3 - Default URLSearchHook is missing
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O4 - HKLM\..\Run: [Start It Upping] svchosets.exe
O4 - HKLM\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKLM\..\RunServices: [ati control panel] atiphexx.exe
O4 - HKLM\..\RunServices: [Start It Upping] svchosets.exe
O4 - HKLM\..\RunServices: [Microsoft WinUpdate] syswin32.exe
O4 - HKLM\..\RunServices: [dfix] dxet.exe
O4 - HKLM\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKLM\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\Run: [Start It Upping] svchosets.exe
O4 - HKCU\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\RunServices: [dfix] dxet.exe
O4 - HKCU\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKCU\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - Startup: NextOffice 8.2.lnk = C:\Program Files\NextOffice8.2\program\quickstart.exe
O4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll
O16 - DPF: {771A1334-6B08-4A6B-AEDC-CF994BA2CEBE} (Installer Class) - http://www.ysbweb.com/ist/softwares…ysb_regular.cab
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS\System32\msc.cpl
Please not a Adaware SE Personal and Spybot S&D log is available upon request
Im having a lot of trouble on this computer with spyware, expecially with elitum elite bar, but i am also having many other troubles, i keep getting spyware on my computer for no reason, and in addition when i start up my computer i ALWAYS get these 2 disgusting (porn) popups and no matter what i do, it cannot be fixed, ive run both adaware and spybot S&D both updated and both using the steps provided at this site –> http://www.wilderssecurity.com/showthread.php?t=15913
I am using Trend Micro Antivirus software
im going to post my hijack this log now, and i hope that you guys can fix my comp:
P.S PLEASE NOTE THIS IS MY FIRST TIME USING HIJACKTHIS IN A LONG TIME AND I DID NOT CHANGE ANY SETTINGS, I DOWNLOADED IT, THEN MADE THE LOG, SO IF THERES ANYTHING ELSE I MUST DO PLEASE TELL ME
Logfile of HijackThis v1.98.2
Scan saved at 3:17:20 PM, on 23/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\Program Files\Trend Micro\Internet Security\tmproxy.exe
C:\Program Files\Trend Micro\Internet Security\PccPfw.exe
C:\WINDOWS\System32\svchosets.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exe
c:\windows\system32\qpalsp\palsp.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exe
C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntim e.exe
C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
c:\windows\system32\qpalsp\wshield.exe
C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\explorer.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
C:\Documents and Settings\Matthew\My Documents\hijackhis2\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R3 - Default URLSearchHook is missing
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O4 - HKLM\..\Run: [Start It Upping] svchosets.exe
O4 - HKLM\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKLM\..\RunServices: [ati control panel] atiphexx.exe
O4 - HKLM\..\RunServices: [Start It Upping] svchosets.exe
O4 - HKLM\..\RunServices: [Microsoft WinUpdate] syswin32.exe
O4 - HKLM\..\RunServices: [dfix] dxet.exe
O4 - HKLM\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKLM\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\Run: [Start It Upping] svchosets.exe
O4 - HKCU\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\RunServices: [dfix] dxet.exe
O4 - HKCU\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKCU\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - Startup: NextOffice 8.2.lnk = C:\Program Files\NextOffice8.2\program\quickstart.exe
O4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll
O16 - DPF: {771A1334-6B08-4A6B-AEDC-CF994BA2CEBE} (Installer Class) - http://www.ysbweb.com/ist/softwares…ysb_regular.cab
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS\System32\msc.cpl
Please not a Adaware SE Personal and Spybot S&D log is available upon request